how to https redirect

Question

I have our site correctly doing a redirect for a site in HTTP, but when I try to do the very same thing for HTTPS, it just hangs in my browser and doens't ever complete.  I tried watching for the activity in the Development tools, but it doesn't ever log anything other than the reques going out.  We have a couple of hundred domains that we want to have a redirected to another website.  It isn't being blocked/getting to our firewall.&nbsp;
when HTTP_REQUEST {
  HTTP::redirect https://www.infousa.com/
}&nbsp;

aaronb_8424 · Answer

Are you redirecting to a site off of your LTM? If so, the rule should work as written above. You should add quotes around the domain name, but that should not affect the above example.

patrik_jonsson · Answer

Hi!&nbsp;
Have to ask. Have you assigned the iRule to the virtual server server?&nbsp;
Can you please post your config?&nbsp;
/Patrik&nbsp;

jonjuhler_46216 · Answer

I tried the quotes and I get the same results.  I have this assigned to a VIP, just like I have for my HTTP site.  This is my config:
ltm virtual ami-drlistexpress-https {
    destination 199.125.10.59:https
    ip-protocol tcp
    mask 255.255.255.255
    profiles {
        http { }
        tcp { }
    }
    rules {
        https_for_infousa
    }
    source 0.0.0.0/0
    source-address-translation {
        type automap
    }
    vlans-disabled
}&nbsp;

cory_50405 · Answer

Jon,&nbsp;
You have to terminate SSL on your virtual server (assign a client SSL profile) in order for the redirect to work.  Otherwise the LTM has no visibility into the layer 7 (HTTP) data to perform the redirect.&nbsp;

jonjuhler_46216 · Answer

So I need to put in a client SSL profile for the destination URL that I am tryiing to redirect the traffic to?&nbsp;

Forum Discussion

how to https redirect

7 Replies

Recent Discussions

F5Access | MacOS Sonoma

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Enabling AVR and creating Profiles

Get associated pool name from VIP IP using F5-LTM

Disacard SSL::cert mode to ignore when default SSLClient profile is set to request or require

Related Content

HTTP To HTTPS Redirect 301

Anchor Link Redirect

Http redirection

HTTP URI Replace/Redirect

HTTP POST redirect preserving POST data